5.4. Generating Manual Pages: sepolicy manpage
The
sepolicy manpage command generates manual pages based on the SELinux policy that document process domains. As a result, such documentation is always up-to-date. Each name of automatically generated manual pages consists of the process domain name and the _selinux suffix, for example httpd_selinux.
The manual pages include several sections that provide information about various parts of the SELinux policy for confined domains:
- The
Entrypointssection contains all executable files that need to be executed during a domain transition. - The
Process Typessection lists all process types that begin with the same prefix as the target domain. - The
Booleanssection lists Booleans associated with the domain. - The
Port Typessection contains the port types matching the same prefix as the domain and describes the default port numbers assigned to these port types. - The
Managed Filessection describes the types that the domain is allowed to write to and the default paths associated with these types. - The
File Contextssection contains all file types associated with the domain and describes how to use these file types along with the default path labeling on a system. - The
Sharing Filessection explains how to use the domain sharing types, such aspublic_content_t.
See the sepolicy-manpage(8) manual page for further information about
sepolicy manpage.
